Good day,
After receiving the vulnerability notification this morning I went to update our Atlassian products to find that crucible docker images are no longer being updated from versions 4.8.6. Is it possible to get the official images updated to the fixed version 4.8.8 mentioned in this article:
https://confluence.atlassian.com/security/multiple-products-security-advisory-unrendered-unicode-bidirectional-override-characters-cve-2021-42574-1086419475.html
Kind regards,
Kalvin G.
Hi @Kalvin Gühring ,
We pushed 4.8.8 to Docker hub a couple days ago - just wanted to make sure you saw. Running docker pull atlassian/crucible:latest will currently pull the 4.8.8 ubuntu image.
Cheers,Daniel | Atlassian Support
Hi @Daniel Eads
I had not seen the updates so thanks for checking in with me. I have updated and all looks good.
Thanks,Kalvin G.
It looks like you're new here. Sign in or register to get started.